14e031b1a4b7fd8510480e46bede6bbfe28a2ddc1282785cc93b6b64a6810e24 | Triage

Sharing

General

Target

2024-09-19_bbd5d45c77fd78e13c3074a7b77110a6_goldeneye
Size

197KB
Sample

240919-enwgwszfpf
MD5

bbd5d45c77fd78e13c3074a7b77110a6
SHA1

750dd497fd97824c34327b493b44e4e9092e2316
SHA256

14e031b1a4b7fd8510480e46bede6bbfe28a2ddc1282785cc93b6b64a6810e24
SHA512

5486393646c2ae5d13fb78679a4d3e343bb34b0861077e0b324ea8d99749f32fa557c90f81cbee7eb124733f9f0a838b51a87b9898676e0bf36945a09aeae913
SSDEEP

3072:jEGh0o6l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGMlEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2024-09-19_bbd5d45c77fd78e13c3074a7b77110a6_goldeneye
- Size
  
  197KB
- MD5
  
  bbd5d45c77fd78e13c3074a7b77110a6
- SHA1
  
  750dd497fd97824c34327b493b44e4e9092e2316
- SHA256
  
  14e031b1a4b7fd8510480e46bede6bbfe28a2ddc1282785cc93b6b64a6810e24
- SHA512
  
  5486393646c2ae5d13fb78679a4d3e343bb34b0861077e0b324ea8d99749f32fa557c90f81cbee7eb124733f9f0a838b51a87b9898676e0bf36945a09aeae913
- SSDEEP
  
  3072:jEGh0o6l+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGMlEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence